$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft File: saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json) Hash identifier: X1kce09dJ3V1A/Qu/hJP7DlHbafXX6SOkfjGO36RPgA= Subject key identifier: 2E:00:72:0A:E7:25:A2:67:8E:56:FE:5A:78:DD:C5:C6:F5:E1:55:00 Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B Certificate serial: 06FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft Manifest number: 06FA Signing time: Thu 02 May 2024 22:50:47 +0000 Manifest this update: Thu 02 May 2024 22:50:46 +0000 Manifest next update: Thu 09 May 2024 22:50:46 +0000 Files and hashes: 1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: Y1oe2fkC5q/OpX9REjedGVtF45Nkz0SO8tZQ6EF1NZ8=) 2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: 8mFzzrlk85rbk61UzKP3wPdAY1iqXOtfnZR2ZRvL2VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B Validity Not Before: May 2 22:50:46 2024 GMT Not After : May 9 22:50:46 2024 GMT Subject: CN=663418c7-3a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:62:67:10:e6:b8:ec:43:d5:b3:7c:43:ce:94: 67:9c:ec:28:9d:d6:fb:a5:c8:d8:5c:19:23:39:03: 3c:55:fc:20:aa:99:d7:8e:e9:ab:7b:32:9b:27:94: d7:ef:ea:25:a5:98:dd:d4:c9:e3:56:71:55:04:06: ac:67:38:de:d2:4d:99:b5:14:0a:95:92:18:9d:23: 0a:e9:9f:04:e6:cd:a6:c8:b4:7f:39:a2:39:76:8b: 64:a2:bb:d9:dd:b3:bd:ae:1e:b5:e3:6c:50:28:ce: 5d:d1:1e:ea:fd:c5:94:6f:a6:d1:df:f9:27:59:86: e3:c5:75:45:f7:57:25:c9:45:27:87:fe:77:17:46: 37:88:15:25:7c:fb:e3:de:22:00:9f:ce:a0:f8:5d: cd:5b:ac:9e:8f:e3:1d:ae:a0:96:9f:f8:97:30:1d: dc:9d:75:5b:b3:e0:06:f9:3a:a0:c0:c1:a6:a2:27: 1e:58:e9:d5:d6:fa:2b:e2:c2:da:08:51:9c:38:68: a5:12:d2:e5:a5:e0:43:a4:48:ca:e3:93:ea:48:19: 5c:56:d0:25:62:b2:94:a0:1f:45:06:08:51:06:39: f2:5f:35:64:82:50:9e:e8:8c:ea:6d:1c:8f:e9:53: e2:2e:cd:18:23:d9:c1:d3:7a:4a:7b:61:95:03:26: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:00:72:0A:E7:25:A2:67:8E:56:FE:5A:78:DD:C5:C6:F5:E1:55:00 X509v3 Authority Key Identifier: keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:91:df:26:e2:e0:e6:11:e1:d4:30:3b:c7:2f:79:17:c6:74: 44:c7:96:4a:ba:e1:ec:e2:cc:2f:2d:21:9b:0f:fc:e1:fc:4d: 1e:d7:18:06:9a:18:af:ed:ae:8c:28:37:4f:eb:3c:e1:50:62: d0:c9:2e:47:7a:e2:60:bf:ef:5c:ca:0d:db:ef:d3:b6:4d:2a: 97:f4:fa:a5:05:2e:18:de:c8:e4:2f:e1:78:b2:25:22:2d:e3: 4c:85:e2:43:2f:7b:c4:26:15:51:5e:24:df:cb:1f:66:40:bb: 85:56:dc:b5:26:46:ef:b4:d1:b8:05:4d:0e:ca:98:c4:07:f8: e0:40:3b:18:17:d1:3e:be:cf:62:03:a5:84:e3:e8:13:26:af: 8e:8e:d1:3d:89:5d:00:a5:a1:18:6c:07:e5:1d:1b:f1:33:4f: 45:18:11:cd:64:0b:fa:e6:c8:87:0e:02:d5:8e:46:a6:77:ff: 09:f6:41:a8:49:08:e4:75:91:5d:33:d4:fe:03:19:31:a1:7f: bf:ed:52:f5:7d:53:75:db:96:fc:a5:dd:c5:bb:ba:c1:32:f2: e7:e9:12:90:3b:0b:9c:92:b2:40:db:78:53:de:20:82:3d:18: 11:18:72:e1:ce:f7:08:9e:9e:8f:9a:8d:63:6a:78:ce:38:2b: 10:8f:23:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFBRjIxMTAvBgNVBAUTKEIxQTE4QzIwNjc3NThGRThDOTIxOTgxRThCMTFGQTMw OEU2MjY5M0IwHhcNMjQwNTAyMjI1MDQ2WhcNMjQwNTA5MjI1MDQ2WjAYMRYwFAYD VQQDEw02NjM0MThjNy0zYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mJnEOa47EPVs3xDzpRnnOwondb7pcjYXBkjOQM8VfwgqpnXjumrezKbJ5TX 7+olpZjd1MnjVnFVBAasZzje0k2ZtRQKlZIYnSMK6Z8E5s2myLR/OaI5dotkorvZ 3bO9rh6142xQKM5d0R7q/cWUb6bR3/knWYbjxXVF91clyUUnh/53F0Y3iBUlfPvj 3iIAn86g+F3NW6yej+MdrqCWn/iXMB3cnXVbs+AG+TqgwMGmoiceWOnV1vor4sLa CFGcOGilEtLlpeBDpEjK45PqSBlcVtAlYrKUoB9FBghRBjnyXzVkglCe6IzqbRyP 6VPiLs0YI9nB03pKe2GVAybRTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4Acgrn JaJnjlb+Wnjdxcb14VUAMB8GA1UdIwQYMBaAFLGhjCBndY/oySGYHosR+jCOYmk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUFGMi84MjI2QUI3MkY3 MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWotakpJWmdlaXhINk1JNWlh VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhR01JR2Qxai1qSklaZ2VpeEg2TUk1aWFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUFGMi84MjI2QUI3MkY3MUUxMUVBQjY5OTQxMjNDNEY5QUUwMi9zYUdNSUdkMWot akpJWmdlaXhINk1JNWlhVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwkd8m4uDmEeHUMDvHL3kXxnREx5ZKuuHs4swvLSGbD/zh/E0e1xgG mhiv7a6MKDdP6zzhUGLQyS5HeuJgv+9cyg3b79O2TSqX9PqlBS4Y3sjkL+F4siUi LeNMheJDL3vEJhVRXiTfyx9mQLuFVty1JkbvtNG4BU0OypjEB/jgQDsYF9E+vs9i A6WE4+gTJq+OjtE9iV0ApaEYbAflHRvxM09FGBHNZAv65siHDgLVjkamd/8J9kGo SQjkdZFdM9T+AxkxoX+/7VL1fVN125b8pd3Fu7rBMvLn6RKQOwuckrJA23hT3iCC PRgRGHLhzvcInp6Pmo1janjOOCsQjyNU -----END CERTIFICATE-----Generated at Thu May 2 23:48:44 2024 by rpki-client on console-fra.rpki-client.org